Security system

Abstract: Electrical appliances (1) each include a module which carries a code. Whenever mains electrical power is reconnected to an apparatus (1), FSK signals are sent via the electricity main circuit (11) to a security module (10). The security module (10) causes a call to be set up via a telephone network (represented by line (7) Interface (8) and switch (9)) to a security unit (12). The security unit (12) uses customer line identity (CLI) signals from the interface (8) to identify a code which it returns via the network to the security module (10). The module (10) forwards the received code using FSK signals to the requesting apparatus (1) by way of mains circuit (11). If an incorrect code (or no code) is received the module in the apparatus (1) inhibits the supply of power to operational circuits.

Description: The present invention relates to a security system and more particularly to a security system for electrically powered apparatus. Items of substantial value are to be found in most homes, schools and offices. Such items include not only personal computers, video recorders, hi-fi equipment and televisions but also so-called white goods such as freezers, refrigerators, washing machines and cooking equipment. All of these transportable goods are attractive to thieves some of whom have emptied entire houses during the absence of their occupiers. It is known that security coding of items can discourage theft. For example many radios installed in vehicles will not operate after a power supply interruption unless a correct security code is entered. Clearly such a system can be applied to other apparatus such that the apparatus is rendered unusable until the correct security code is entered. Although such systems improve the security of the coded apparatus, notwithstanding the inclusion of multiplying delays between attempts, the code may be broken by "trial and error" over a period of time. Similarly, personal computers may be programmed to require password entry prior to use. However, skilled programmers can cause the computer to restart using a different program and may in any event discover the password. Further developments of security for electrically powered apparatuses have been disclosed in US patent 5,021,779. In US patent 5,021,779 there is disclosed a method of protecting transportable apparatus using signalling over a mains connection to the apparatus. In this case a series of switches are used in the protected apparatus to define a code to be received from the mains circuit. Another plugable item is required to be connected to the same power circuit and is programmed to transmit signals to the power line. Thus if apparatus is to be used other than in the first location both the apparatus and transmitting device must be moved to the new location. Further, both the transmitting device and the protected apparatus are likely to be present in the same premises. In US patent 4,942,599 dial computer system accessible by a dial up telephony connection uses calling line identity from the exchange switchign system to transmit specific information back to a data receiving apparatus or another computer. In this case the receiving computer may be dialled up by any number of other computers and will transmit data to the calling computer in dependence upon its calling line identity. The present invention seeks to provide an improved security system for use in electrically powered portable or transportable apparatus by use of calling line identity for example. According to one aspect of the present invention there is provided a security system comprising access means to cause seizure of a connection to a telephone exchange, the exchange having means to identify the source of seizure and to generate CLI signals identifying the source, the telephone exchange causing connection of each call from the access means to security means which is responsive to each request from the access means to transmit coded signals derived from the CLI signals to the connection, characterised in that the access means comprises transceiver means arranged to respond to signals identifying a code request received from more than one connected apparatus and to cause communication with the security means, the access means also being responsive to the coded signals received from the security means to transmit corresponding signals to the apparatus which transmitted the code request. Preferably the transceiver means is responsive to signals transmitted on an electrical power line and may be arranged to transmit signals to the electrical power line. Such signals may comprise frequency shift keyed signals. According to a further aspect of the invention there is provided electrically powered apparatus including storage means for holding a code, means to compare the stored code with a received code and control means to prevent power being supplied to operate the apparatus unless a received code and the stored code are compatible characterised in that on reconnection of the apparatus following interruption of electrical power the control means causes a signal identifying a request for identity to be transmitted to local access means, the local access means being adapted to transmit corresponding signals to a remote location by way of a telecommunications connection and to receive coded signals from the remote location which received signals are transmitted to the apparatus. Preferably the request for identity is in the form of signals transmitted on the electrical power line to which the apparatus is connected, and code signals forming the identity are received by way of the power line. Such signals may comprise frequency shift keyed signals. The control means may further be arranged, on receipt of an incompatible identity to return signals indicating its stored code whereby its location may be identified by remote apparatus. Further optional aspects of the invention including initial coding and subsequent decoding of electrically powered apparatus equipped with the system will be apparent from the description and claims hereinafter. A security system in accordance with the invention will now be described by way of example only with reference to the accompanying drawings of which: - Figure 1 is a block schematic diagram of a typical domestic security system; Figure 2 is a block schematic diagram of a security module included in each of the domestic apparatuses shown in Figure 1; and Figure 3 is a block schematic diagram of the mains-telephone transfer point shown in Figure 1. Referring first to Figure 1, a number of mains electricity powered apparatuses, 1, such as a video-recorder, television set, personal computer, washing machine and microwave oven are shown for illustrative purposes only. These domestic apparatuses 1 are connected to the house electricity ring-main circuit 11 through plug and socket arrangements, schematically shown as switch contacts 2. Telephone equipment such as a telephone 3, facsimile transmission apparatus 4, answering machine 5 and a modem 6 may also be present connected by way of suitable network terminating equipment (not shown) to a telephone line 7 to a telephone exchange. The line 7 is connected by way of a customer line interface 8 to a switch unit 9 in known manner. The customer line interface 8 is of the kind which provides signals identifying the customer line (sometimes called CLI). Such signals are used by the telecommunications systems to arrange appropriate charging for telephone services and, in some cases, may be passed across the network to remote switching units (not shown). As thus far described the domestic and telecommunications arrangements are not dissimilar to many existing arrangements. However, in the system of the invention, a security unit 10 is connected to the electricity ring main circuit 11 and also to the line 7. In the telecommunications network, but not necessarily in the local switching centre, a security unit 12 is provided. Interaction between the units 10 and 12 will become apparent from the description hereinafter. Referring now to Figure 2, during manufacture (or possibly by retrospective fitting) the domestic apparatuses 1 of otherwise conventional design include an identity store 21 and a process controller 22 (for example a microprocessor) both of which may exist for use for other purposes in the apparatus. When the apparatus is first provided with mains power from the switch 2, power from mains connection is not passed to operational circuits 25 of the apparatus because a switch 26 is not closed. A power supply circuit 24 (which may be the normal power supply circuit for the particular apparatus) powers up the process controller 22 which causes frequency shift keyed signals to be sent through an interface 23 on to the electricity ring main 11 in know manner. Now considering Figure 3 as well, the security unit 10 receives the FSK signals from the electricity ring main 11 by way of an FSK interface 31. A process controller 32, on identifying the signals as a connection request causes the telephone line to be seized using switch 34. A tone sender 33 is now used to send signals to the line 7 which cause a path to be set up through the telecommunications network (as represented by the switch 9 and its associated control 14) to the security unit 12. This call to the security unit 12 is referred to below as a "Who am I?" signal. The security unit 12 receives CLI signals from the customer line interface 8 which signals uniquely identify the source of the request. Using a coding algorithm, the security unit 12 causes signals to be returned over the network (9) which signals represent a numerical or alphanumerical code unique to the particular customer line 7, such as a scrambled version of the telephone number. The signals are decoded by a coder-decoder 35 (Figure 3) and the process controller 32 causes the received code to be transmitted across the FSK interface 31 to the FSK interface 23 of the requesting apparatus 1. The Process controller 22 compares the received identity with that held in the identity store 21 and, if compatibility is confirmed causes the switch 26 to close to allow the operational circuits 25 to function. If identity between the received code and the stored code is not achieved then the process controller 22 does not allow power to be provided to the operational circuits. Thus if coded apparatus is stolen the thief will be at least inconvenienced in seeking to use it. In a further development, the process controller 22 may be arranged, on receipt of an invalid code, to return signals via the security unit 10 to the security unit 12 indicating that an invalid code has been received. The security unit 12 may accordingly be used to identify the location of potentially stolen goods. Further, the process controller 22 may cause the actual stored identity to be transmitted such that the original source of the apparatus can be checked. This latter capability may be used to advantage by manufacturers and stockist of so-called white and brown goods in manner hereinafter described. As will be appreciated it is not the aim of the invention to inhibit bona-fide transfer or trade in apparatus. Thus, on initial supply, it is expected that the identity store will be preprogrammed with a blanking code which is "known" by the process controller 22. So long as the blanking code is present, each connection of power to the apparatus will still cause the controller 22 to send a "Who am I?" signal by way of the FSK Interface 23. However if the particular premises is not equipped with a security unit 10, no response will be received and the apparatus will appear to function as if the protective circuit was not present. If the premises are equipped then the security code unique to the particular CLI will be received. The controller 22 now sends a second "Who am I?" signal and again receives the security code. Assuming that the same code is received at least twice in succession the controller 22 causes the new code to be stored in the identity store 21 and future disconnection and reconnection of the newly coded apparatus will only succeed if the correct security code is present. In order to protect manufacturers, wholesalers and bona-fide retailers, controller 22 on receipt of a first security code subsequent to its known blanking code may cause its known blanking code to be transmitted. Such a code may be manufacturer unique or may indeed include manufacturer and machine serial number uniqueness. On receipt of a manufacturer code, the security unit 12 may be arranged to interrogate a manufacturer's database to ensure that the goods have validly passed to the current end-user. If so, signals to cause updating of the stored identity may be transmitted. If not then the location of the apparatus may be known. Of course, there are times when goods need to be moved from their secured location for valid reasons. If this is necessary then the bona-fide owner uses the telephone 3 to establish a direct call to the security unit 12 and transmits a personal identification number (PIN). The security unit 12 commences a timer of, say, five minutes duration and any "Who am I?" requests received from the particular CLI result in a special code being returned to cause the process controller 22 and the identity store 21 to be returned to a blanked state. Thus, the owner may disconnect power from a unit which is to be transferred, effect a telephone call and PIN transmission as described and reconnect power to the apparatus which may then be removed from the specific premises. However, as has been noted above, the blanked state identity marking will remain with the apparatus until the procedure of re-coding occurs. On recoding the blanked state code may be checked as hereinbefore described. In a further feature of the invention, the "Who am I?" signal may include coding identifying the type of apparatus originating the request and facilities may be provided in the security unit 12 to enable requests from specified apparatus to be refused in particular periods. Thus, if a parent does not wish children to have access to, say, a video player, he or she may indicate this by calling the security unit 12, entering a PIN and tone signals from the telephone keypad, and no signal will be then returned if a video-player "Who am I?" request is received. Such prohibition may be preprogrammed to terminate at a particular time or may await cancellation by further telephoning and PIN entry. Although the invention has been described by reference to a domestic installation, it will be realised that it is equally applicable to office, school or other commercial environments. However, as may be realised, where multiple power rings 11 are present additional security units 10 may be needed. Further, while the security unit 12 as described herein is part of the telephony network, it will be realised that other dial-up links may be used always provided that a unique identity of the origination of the call is provided. It will also be appreciated that apparatus such as the facsimile machine (4 of Figure 1) or answering machine (5 of Figure 1) which are adapted for connection to both the mains source 11 and to the telephone line 7 may include the ability to interface with the security unit 12 directly without interfacing through the security unit 10.

Claims: A security system comprising access means (10) to cause seizure of a connection (7) to a telephone exchange (9), the exchange (9) having means to identify the source of seizure and to generate CLI signals identifying the source, the telephone exchange (9) causing connection of each call from the access means (10) to security means (12) which is responsive to each request from the access means (10) to transmit coded signals derived from the CLI signals to the connection (7), characterised in that the access means (10) comprises transceiver means (33, 35) arranged to respond to signals identifying a code request received from more than one connected apparatus (1) and to cause communication with the security means (12), the access means (10) also being responsive to the coded signals received from the security means (12) to transmit corresponding signals to the apparatus (1) which transmitted the code request. A security system according to claim 1, further characterised in that the access means (10) includes interface means (31) and control means (32) responsive to signals transmitted on an electrical power line (11). A security system according to claim 1 or claim 2, further characterised in that the access means (10) includes interface means (31) and control means (32) responsive to signals received from the connection (7) to transmit signals to an electrical power line (111). A security system according to any one of claims 1 to 3, further characterised in that the security means (12) is responsive to signals transmitted by the requesting apparatus (1) to identify a previous source or location of the requesting apparatus (1). A security system according to claim 4, further characterised in that the security means (12) is arranged to access data in response to the identified source whereby the validity of the current location of the requesting apparatus (1) may be checked. A security system according to any one of claims 1 to 5, further characterised in that the security means (12) is responsive to signals received by way of the telephone line (7) to accept instructions to deny a response to specific requesting apparatuses (1) for a predetermined period of time or until receipt of further signals cancelling such request. A security system according to any one of claims 1 to 6, further characterised in that the security means (12) is responsive to signals received over the telephone line (7) to start a predetermined time period during which signals received from the requesting apparatus cause return of special coding signals which effect identity modification in the requesting apparatus (1). A security system as claimed in any preceding claim further characterised in that the transfer of information from requesting apparatus (1) to the access means (10) is by way of frequency shift keyed signals supplied to an electrical power line (11) by the requesting apparatus (1). Electrically powered apparatus including storage means (21) for holding a code, means (22) to compare the stored code with a received code and control means (22, 24) to prevent power being supplied to operate the apparatus unless a received code and the stored code are compatible characterised in that on reconnection of the apparatus following interruption of electrical power the control means (22) causes a signal identifying a request for identity to be transmitted to local access means (10), the local access means (10) being adapted to transmit corresponding signals to a remote location (12) by way of a telecommunications connection (7) and to receive coded signals from the remote location (12) which received signals are transmitted to the apparatus (1). Electrically powered apparatus according to claim 9, further characterised in that the apparatus includes means (23) to transmit the request for identity in the form of signals transmitted on the electrical power line (11) to which the apparatus (1) is connected. Electrically powered apparatus according to claim 9 or claim 10, further characterised in that the apparatus includes means (23) to receive the coded signals which form the identity by way of the electrical power line (11). Electrically powered apparatus according to any one of claims 9, 10 or 11, further characterised in that the control means (22) is arranged upon receipt of an incompatible identity to return signals indicating its stored code. Electrically powered apparatus as claimed in any one of claims 9 to 12, further characterised in that the control means (22) inhibits supply of electrical power to operational circuits (25) of the apparatus (1) unless the received code and the stored code are compatible. Electrically powered apparatus as claimed in any one of claims 9 to 13, further characterised in that the control means (22) is arranged to forward signals which identify the type of apparatus (1) which is requesting identity. Electrically powered apparatus as claimed in any one of claims 9 to 14, further characterised in that the signals transmitted by the control means are transmitted using frequency shift keying by way of the electrical power connection (11) to the apparatus.

Inventors: HOPKINS JONATHAN, MCGLAUGHLIN DAVID, REEDER STEPHEN MICHAEL, HOPKINS, JONATHAN, MCGLAUGHLIN, DAVID, REEDER, STEPHEN MICHAEL, HOPKINS, JONATHAN 3 THE GLEBES, REEDER, STEPHEN MICHAEL 142 FAULKENERS WAY
Applicants: BRITISH TELECOMM, BRITISH TELECOMMUNICATIONS PUBLIC LIMITED COMPANY
Application year: 1994
Main classification: H04M11
IPC codes: G06F1, H04M11, G08B13, G06F21